What changed in SEC crypto custody?

TLDR

The SEC made two notable moves on crypto custody this week: an investor bulletin on wallet/custody basics for retail, and guidance for broker?dealers on holding crypto asset securities under existing customer protection rules.

1. Retail bulletin explains self?custody vs third?party custody, hot vs cold wallets, and risks like rehypothecation and commingling per a media summary.
2. Broker?dealer guidance says firms can treat crypto asset securities as in possession if they control private keys and can transfer on chain, with policies and risk checks, per an SEC statement.
3. Scope is limited to securities (e.g., tokenized stocks), not all crypto; non?security crypto at broker?dealers isnt covered by SIPC, per an expanded guidance overview.

Deep Dive

1. Retail Custody Basics

The SECs investor bulletin aims to educate retail users on custody choices and risks. It distinguishes self?custody (you hold keys and bear full responsibility) and third?party custody (a custodian manages keys, with risks like lending or pooling client assets).

• The bulletin highlights hot wallets (convenient but exposed to hacking) versus cold wallets (offline but vulnerable to physical loss and key mismanagement), per a media summary.
• The document urges reviewing custodians policies on rehypothecation, asset segregation, insurance, and data handling, per the report above.

2. Broker-Dealer Possession Standard

The SECs Division of Trading and Markets clarified how broker?dealers can custody crypto asset securities under Rule 15c3?3 (Customer Protection Rule).

• A firm may treat such assets as in physical possession or control if it has exclusive private key control and the ability to transfer on the distributed ledger, backed by documented policies, controls, and DLT risk assessments, per the SEC statement.
• If a firm detects material security or operational issues with the chain (hard forks, attacks), it cannot deem itself in possession, per the statement above.

3. Scope, SIPC, and Implications

The updates do not convert all crypto into securities. They focus on custody of crypto asset securities and investor education, while drawing boundaries for protections.

• The SEC reiterated that SIPC protection applies to securities, not non?security crypto held at broker?dealers; it also noted how custody can be structured under existing law, per an expanded guidance overview.
• The guidance supports tokenization use cases (e.g., stocks or bonds on chain) within traditional regulatory frameworks, per the overview above.

Conclusion

Net effect: more education for retail on custody risks and clearer broker?dealer rules for tokenized securities custody. This could gradually widen institutional participation in on?chain securities, while leaving non?security crypto outside SIPC and reinforcing the need for careful custodian due diligence and robust self?custody practices.